VDB

CVE-2024-12380

CVE-2024-12380 PUBLISHED

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.

EPSS 0.05% · 15.6th percentile

Risk Scores

EPSS Score
0.05%
15.6th percentile

Affected Products

VendorProductVersions
Bitnamigitlab11.5.0
Bitnamigitlab11.5.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Mar 12, 2025 CVE Published
  • Mar 14, 2025 EPSS Score
  • Mar 14, 2025 Coalition ESS Score
  • Mar 28, 2025 EPSS Score
  • Apr 10, 2025 EPSS Score
  • Apr 24, 2025 EPSS Score
  • May 7, 2025 EPSS Score
  • May 21, 2025 EPSS Score
  • Jun 3, 2025 EPSS Score
  • Jun 16, 2025 Coalition ESS Score
  • Jun 17, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›